Security
Found a vulnerability in Tilepoch's Solana program, its servers or its web app? Tell us first, privately, and we will work with you to fix it.
How to report
Email [email protected]. Please include:
- what is affected: the program, the app, or a server;
- the steps to reproduce it, or a proof of concept;
- the impact as you understand it;
- how you would like to be credited, if at all.
What you can expect
- We acknowledge your report within 72 hours.
- We keep you informed while we investigate and fix.
- We aim to disclose within 90 days of your report, together with you, and sooner once a fix is live.
- We credit you publicly if you want us to.
Safe harbor
We will not pursue or support legal action against research done in good faith under this policy. Good faith means:
- you test on devnet or on your own local copy, never against other people's funds or games on mainnet;
- you do not access, change or keep data or funds that are not yours, beyond the minimum needed to show the issue;
- you do not degrade the service for other players;
- you give us a reasonable time to fix the issue before you tell anyone else.
Rewards
We do not run a paid bug bounty yet. We will say so here when we do.